Scams Exploit Placeholder Domains in AI Agent Skills

www.manifold.security

Scams Exploit Placeholder Domains in AI Agent Skills

First seen 27 Sep 2026, 19:07 UTC • •61.5

Article Content

1 / 3

Browse articles

ThreatCluster •September 28, 2026 at 18:20 UTC

•Two placeholder domains redirect macOS users to scams.
•Static checks failed to detect malicious redirects due to JavaScript execution.
•The issue affects 359,000 GitHub files and 349 AI agent skills.

Manifold Security discovered that unreserved placeholder domains, specifically yoursite.com and your-domain.com, are redirecting macOS users to scams. These domains, found in 359,000 GitHub files and cited by 349 AI agent skills, serve cloaked scam redirects without any changes to the original code. Researchers tested these domains across 24 real-browser sessions, where two visits led to scam pages while others ended on parking or ad pages. The scams included a fake 'MacOS Security Center' warning and counterfeit news articles promoting investment schemes. Static checks failed to identify the malicious redirects, which only activated after JavaScript execution in a real browser. This issue highlights the risks associated with using non-reserved domains in software documentation. The findings follow a previous disclosure about another placeholder domain, third-party.com, which was turned into a ClickFix lure targeting Windows users.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 46d ago How this analysis works

Timeline

2026-09-23

Disclosure of third-party.com scam

Manifold Security reported that third-party.com was turned into a ClickFix lure targeting Windows users.

2026-09-26

Hackread article published

Hackread published findings on placeholder domains redirecting to scams, detailing the methods used.

2026-09-27

Manifold Security report published

Manifold Security released a detailed report on the scams linked to placeholder domains, confirming their findings.

Manifold Security

More articles in this cluster (2)

Threat Graph

9 entities, 9 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Phishing
T1059.001 - PowerShell

Organization (1)

Manifold Security

Indicator (1)

hackread.com

Malware (1)

ClickFix

Affected Platform (3)

Linux
MacOS
Windows

Tool (1)

PowerShell

Relationships

ClickFix communicates with hackread.com
ClickFix targets Manifold Security
Phishing targets Linux
Phishing targets MacOS
Phishing targets Windows
T1059.001 - PowerShell targets Linux
T1059.001 - PowerShell targets MacOS
T1059.001 - PowerShell targets Windows
ClickFix related to PowerShell

Following this threat?

Track ClickFix and Manifold Security in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Active Exploitation of Siemens Software Center Vulnerability in ClickFix Campaign Siemens has confirmed that a DLL side-loading vulnerability (CVE-2026-110936) in Siemens Software Center is actively being exploited in malware attacks. The vulnerability allows attackers to execute malicious code by placing a specially crafted DLL in a directory searched by the application. Siemens first disclosed…

ClickFix Technique Surges with AI Lures in Cyber Attacks ClickFix has emerged as a dominant cyber attack technique since 2024, now accounting for over 52% of Push's detections. This method has evolved to include sub-techniques like InstallFix and ConsentFix, with attackers increasingly using AI tools as bait. In Q2 2026, ClickFix detections reached 67%, surpassing other…